How to Enable Mailbox Auditing in Office 365

In this blog we see how to enable auditing in office 365. In order to track the users actions like; reading, moving, and deleting the messages.

By using audit logs we can see who read, deleted, moved or copied a message in Office 365.

We need to enable auditing in office 365, by default auditing is not enabled in office 365. As per requirement, you can either enable auditing in specific of all mailboxes by using PowerShell. So first you have to connect to office 365 using PowerShell, then you can enable or disable auditing. Connect to Exchange Online PowerShell.

To Enable Auditing for Single User in Office 365:

Set-Mailbox abc@xyz.com -AuditEnabled $true

To Disable Auditing for Single User in Office 365:

Set-Mailbox abc@xyz.com -AuditEnabled $false

Enable Auditing for all users in Office 365– Run below cmdlet to enable auditing for all office 365 users: